Europaisches European Office europeen 

Patentamt Patent Office des brevets 




Bescheinigung Certificate Attestation 



Die angehefteten Unterla- 
gen stimmen mit der 
ursprOnglich eingereichten 
Fassung der auf dem nach- 
sten Blatt bezeichneten 
europaischen Patentanmel- 
dung Qberein. 



The attached documents Les documents fixes a 
are exact copies of the cette attestation sont 
European patent application confbrmes a la version 
described on the following initialement d^posee de 
page, as originally filed. la demande de brevet 
europeen sp6cifi6e a la 
page suivante. 



Patentanmeldung Nr. 



Patent application No. 

03104677.4 



Demande de brevet n° 



PRIORI lY 
DOCUMENT 

SUBMITTED OR TRANSMITTED W 
COMPLIANCE WITH RULE 1 7. 1 (a) OR (b) 



O 

o 



Der Prasident des Europaischen Patentamts; 
Im Auftrag 

For the President of the European Patent Office 
Le President de I'Office europSen des brevets 

P.O. 



RCvan Dijl< 




Anmeldung Nr: Anmeldetag: 
Application no.: 03104677.4 Date of filing: 

Demande no: D^'^^ ''^ ''^P^*^ 



Anmel der/Appl 1 cantC s)/DeinandeurC s) : 

Koninklijke Philips Electronics N.V. 
Groenewoudseweg 1 
5621 BA Eindhoven 
PAYS-BAS 



Bezelchnung der Erf Indung/Tltle of the 1nvent1on/T1tre de 1' invention: 
(Falls die Bezelchnung der Erflndung nicht angegeben 1st, slehe Beschrelbung. 
If no title is shown please refer to the description. 
SI aucun t1tre n'est 1nd1qu6 se referer a la description.) 

A Method and Apparatus for Detection of a Speckle Based Physically Unclonable 
Ftinction 

In Anspruch genommene Prloriat(en) / Priori tyCles) claimed /PrlorltfiCs) 
revend1qu€e(s) 

Staat/Tag/Aktenzelchen/State/Date/Flle no./Pays/Date/Num6ro de dgp5t: 



Internationale Patentklasslflkatlon/Internatlonal Patent Classification/ 
Classification Internationale des brevets: 

602B27/48 

Am Anmel detag benannte Vertragstaaten/Contracting states designated at date of 
flling/Etats contractants designees lors du d6p6t: 

AT BE BG CH GY CZ DE DK EE ES FI FR GB GR HU IE IT LU MC NL 
PT RO SE SI SK TR LI 



03104677. 4 

cnA/cnn/nco ir«-., mtA 9 - m 9nnn 7001014 



2 



PHNL031441EPP 



1 02.12:2003 
A Method aad Appaiatas for Detection of a Speckle Based Physically Unclonable Function 



This invention relates to a method and apparatus for detection of a speckle 
based physically unclonable function for use in , for example, cryptographic appUcations. 

Informatian security requires a mechanism that provides significant 
asymmetry in the effint required to make intended and unintended use of encoded 
5 information. Such protection is growing in importance as an increasing fiaction of economic 
activity is communicated electronically; sending credit card numbers avex the Internet or 
spending money stored in a smart card's memory assumes that this data cannot be easily 
diq)licated. 

Modem cryptographic practice rests on tide use of one-way fimctions. These 

10 are functions that arc easy to evaluate in the forward direction but infeasible to compute in 
the reverse direction without additional information. Although algorithmic one-way functions 
are widely used, they are facing a number of challenges, which can be addressed by vising 
coherent multiple scattering from inhomogeneous stmctures rather than nuniber theory to 
implement one-way fiinctions. 

IS Laser spedde fluctuations are a &miliar demonstration of the sensitivity of the 

scattering of coherent radiation to the structure of inhomogeneous media. Because any 
changes in the microstructure of a disordered medium cause an order unily change in its 
speckle pattern, a discretely sampled image of speckle intensity provides a fixed-length key 
that hashes the specification of the 3D spatial distribution of scatterers. 

20 A known approach to solving the problems associated with algorithmic one- 

way fimctions is the use of physical random fimctions or physical unclonable functions 
(PUF), which are essentially random functions bound to a physical device in such a way that 
it is computationally and pliysically infeasible to predict the ou^ut of the fiinction without 
actually evaluating it using the physical device. 

25 Thus, the present invention relates to physically unclonable fimctions (PUF's) 

based on speckle pattrans. In a known system, an object that scatters light strongly is 
illuminated with a coharent light source (e.g. a laser) of wavelength X. The input beam with 
beam radius a may be modified with a spatial light modulator (SLM) which gives the beam a 
checkerboard light pattern of varying amplitude and/or phase. This checkerboard pattern is 
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fiilly bluned when the beam has traversed the scatteiing sliucture. A pixelated detector (for 
example, CCD or CMOS device) is placed a distance z behind the scatteiing structure and 
records the so-called specMe pattern. 

The speckle pattern consists of random bright and dadc patches. The scattering 
5 structure is a physical function moping challenges to responses. The structure is 

manufectured in such a way that a duplicate cannot be made, hence the unclonabihty. For 
example, the structure may comprise a layer with randomly dispersed particles of a different 
reftactivB index than the host medium. In short, the scattering structure is an embodiment of a 
PUF, and it will be qipredated that PUF's can be applied in cryptographic and cryptologic 
10 systems, as set out in detail by Ravikanth P^u, et al. Physical One-Way Functions^ Science 
297, p2026 (2002). 

When the pixels of the pixelated detector are much larger than the typical size 
of the bri^t and dark patches of the speckle pattern, the intensity will average out and 
relevant information will be lost, resulting in deteriorated use of the PUF. On the other hand, 
15 when the pixels are much smaller than the typical size of the bright and dark patches of the 
speckle pattern, adjacent pixels record essentially the same information. This redundancy is 
not a fundamental problem, but it has the adverse effect of increasing processing 
requirements. 

It is therefore an object of the present invention to provide an optical method 
20 and apparatus in which criteria are employed to determine the size of the pixels of the 

detectar"Sarwflr^ve rise to detection df all relevant Wite (i.e. the pixels are small enou^) 
without too much redundancy (i.e. the pixels are large enough). 

Thus, in accordance with the present invention, there is provided c^tical 
apparatus corcprising an optical system for providing a coherent radiation source, a strongly 
25 scattering object located in the pain of said coherent radiation, and a pixelated photo-detector 
for detecting a speckle pattern incident thereon, said speckle pattern being produced by said 
said coherent radiation being incident on ssid strong! v gcsttedag obisct, Wsiersin ihs sise of 
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radiation aadproviding apixelatedphoto^etector for receiv^^ 

wherein the size of the pixels of said photo-detector is determinedby flie location tiiereof 
relative to said strongly seating object and is set at substantially tiie same size as ftat of 
bright and dark patches present in said speckle pattem as determined by ^A, where X is the 
wavelength of said coherent radiation, andNA is the numerical ^erture of said optical 
system. 

In one exemplary embodiment of the present invention, the optical system 
comprises a coherent radiation source for providing a coherent radiation beam of radius a, the 
photo-detector being located a distance zfrom said stiwngly scattering object, wherein 
NA=a/z. In an alternative exemplary embodiment of the present invention, flie optical system 
may comprise a coherent radiation source for providing a coherent radiation beam having a 
radius a, and one or more converging optical elements having a focal lengtti/. such as a lens 
or the like, in the path of the coherent radiation beam between the strongly scattering object 
and the photo-detector, wherein NA=a// In this case, the one or more optical elements are 
located a distance v from the strongly scattering object and a distance b from the photo- 
detector, wherein l/v+ llb= \lf. 

In both cases, a spatial Ught modulator maybe provided between the strongly 
scattering object and flie coherent radiation source. One or more elements witii optical power 
(fliat is to say the abiUty to refract li^t), such as a lens or the like, n»ay also be provided in 
the radiation path between the strongly scattering object and the coherent radiation source. 
Preferably, the formation of a speckle pattern by the strongly scattering object is an 
implementation of a physicaUy unclonable function. 

Beneficially, the pixels of the photo-detector are at least smaller than 
TlnuocXyNA, where w « a number in the range 1 to 20, more preferably 1 to 10, and even 
more preferably 5 to 10. In one specific embodiment of tiie invention, ^n.^ may be 5. 
Similarly, the pixels of the photo-detector are F^ferably larger than ri^ATNA, where n^jn is 
anumber between 0 and 2, more preferably between 0 and 1. and even more preferably 
between 0.05 and 0.5. In one specific embodiment of the present invention, may be 0.05. 



These and other aspects of the present invention wiU be parent from, and 
elucidated witii reference to, tiie embodiments described herein. 

Embodiments of the present invention will now be described by way of 
examples only and with reference to the accompanying drawings, in which: 



PHNL031441EPP 



4 02.12.2003 
Figure 1 is a schematic diagram iUusteating optical apparatus according to a 

first exemplary embodiment of the present invention; 

Figure 2 is a graphical representation of the normalised intensity probability 

distribution in respect of the apparatus of Figure 1; and 

Figure 3 is a schematic diagram illustrating optical aijparatus according to a 

second exemplary embodiment of the present invention. 



Thus, as stated above, it is an object of the present invention to provide an 
10 optical method and apparatus in which criteria are employed to determine flie size of the 
pixels of the detector fliat will give rise to detection of all relevant bits (i.e. the pixels are 
small enou^) without too much redundancy (i.e. the pixels are large enough). In practice, 
however, tiie size of the pixels may be fixed, and it is the distance between the PUF and the 
detector which is varied in order to match pixel size to speckle patch size. 
1 5 Thus, the present invention has as its aim to make the pixels comparable in 

size to the bright and dark patches of the speckle pattern. The typical size of these patches has 
been found to be Wa, provided tiiat a is much smaller tiian z, which is likely to be the case, 
in practice. 

The maximum size of tiie pixels may be estimated using tiie sampling theorem 

20 of band-limited functions. If z is sufBcientiy large, flie field at^flie detector plane js the 

' Fourier-t^foraa oftite of the PUF. This regime is known as the fer- 

field or Fraunhofer difi&action regime. In that case, the highest spatial fi^quency of the field 
at die detector turns out to be o/Az. According to the Nyquist criterion, it is then necessary to 
sample the signal with at least twice this spatial firequency bandwidth, which impHes that the 
25 pixels should be spaced at a distance Az/2a or less. In practice, pixels have a finite size and 
thus do not measure the mtensity at a pomtbut instead measure the average intensity overflie 
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r(M) 



Where M is appioximately related to the pixel area Sm by: 



Where So » (Az/a)^ the typical area of a speckle patch. Furthermore, r(M) ii 
the so-called gamma-fimctioa, defined by: 



r(M) = j*/f^''"'exp[-i] 

0 

The probability function is illustrated in Figure 2 of the drawings for 
A^l.0025 (the exponentially decaying function), J14^6 (the peaked fiinction), andM=1.25 
(the intermediate, nearly exponentiaUy decaying function). These cases correspond to pixel 
size of 1/10, 10 and 1 times the Nyquist sanq)ling frequency, respectively. Clearly, for small 
pixel areas, the distribution is relatively smooth, whereas for large pixel areas it is more 
peaked around the average value, approaching a Gaussian distribution in the limit of very 

large pixel area values. 

As shown, therefore, the intensity probability distribution is a relatively 
smooth distribution for small pixel area values and a sharply peaked distribution for large 
pixel area values. As the measurement of intensity is always noisy, it foUows fliat there must 
be an iq>per limit for Mabove which the width of the peaked distribution is indistinguishable 
ftom the noise. Clearly, in order to extract all use&l bits, it is necessary to stay well below 
this upper limit 

As an example. may be taken as a tentative upper limit for the pixel size. 
The lower limit below which a decrease in pixel size no longer increases the amount of usefol 
bits foUows from the value for Mbelow which the piobabiUty distribution hardly deviates 
from the value in the limiting case A^l . In one exen^lary embodhnent. O.OS^^a maybe 
talren as a tentative lower Umit for the pixel size. 

Referring to Figure 1 of the drawings, an optical arrangement according to a 
first exemplary embodiment of the present invention is illustrated, which arrangement is 
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referred to herein as *ftee space geomeby'. An alternative embodiment is referred to herein 
as 'imaging geometry', in which the exit surfece of the PUF and the detector are in conjugate 
planes of a lens, or more generaUy, an optical system. In the firee space geometry of Figure 1, 
it is possible to define NA=fl/z, thereby making the speckle pateh size VNA. The 
arrangement con5)rises a source 1 emitting a coherent Ught beam 2 of wavelength X, a lens 3 
converging the beam 2 to a beam of radius a, an SLM 4 imposing a checkerboard pattern on 
the beam, a PUF 5, and a pbtelated detector 6 placed a distance z behind tiae PXJF. 

Referring to Figure 3 of the drawings, an alternative exemplary embodiment 
of the present invention is fiirlher supplemented wilii an additional lens 7 with focal length^ 
placed a distance v behind the exit surfece of flie PUF and a distance b in fixmt of tiie 
detector, where 1/v + Vb = Vf, i.e. tiie detector is placed in Ihe image plane of the exit 
surfece of the PUF. As explained above, in this exemplary embodiment of Ihe present 
invention, the exit surface and tiie detector are in conjugate planes of a lens 7, or more 
generaUy, an optical system. Conjugate planes means tiiat tiie two planes are tiie object and 
the image planes of each otiier. The typical size of tiie patohes in tiie speckle pattern is once 
again A/NA, where tiie numerical aperture is defined as NA=fl/^ where a is tiie beam radius 
at tiie lens and /is flie focal length of tiie lens (provided fliat a is much smaUer than/, i.e. it 
holds only for small NA vahaes). 

Other exemplary embodiments of flie invention, for example, witii an optical 

imaging system preceding Ibe PUF, are also CMiceiv^le^ ^ . — 

Thus, in surmnary, the present invention provides an optical arrangement of at 
least a coherent Ught source, a strongly scattering object (tiie PUF), and a pixelated photo- 
detector, wherein tiie pixels are comparable in size witii tiie bright and dark patehes of tiie 
speckle pattern. Quantitively, as explained above, tiie pixel size should be roughly VNA, 
where X is flie wavelengfli, and (i) NA=a/^ for tiie fi:ee-space geometry described above, witii 
a being tiie beam radius andz bemg tiie distance between the exit surfece of flie PUF and flie 
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It should be noted that the above-mentioned embodiments illastrate raflier than 
limit the invention, and that those sldUed in the art wiU be enable of designing many 
alternative embodiments without departing from the scope of the invention as defmedby the 
appended claims. In the claims, any reference signs placed in parenlheses shall not be 
5 constmed as limiting the claims. The word "comprising" and "comprises", and the like, does 
not exclude the presence of elements or steps other than those listed in any claim or the 
specification as a whole. The singular reference of an element does not exclude the plural 
reference of such elements and vice-versa. The invention may be implemented by means of 
hardware comprising several distinct elements, and by means of a suitably programmed 
10 computer. In a device claim enumerating several means, several of these means may be 
embodied by one and the same item of hardvrare. The mere feet that certain measures are 
recited in mutually difEerent dependent claims does not indicate that a combination of these 
measures cannot be used to advantage. 
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CLAIMS: 



1 Optical apparatus comprising an optical system (6, 7) for providing a coherent 

radiation beam (2). a strongly scattering object (5) located in the path of said coherent 
radiation, and a pixelated photo-detector (6) for delecting a speckle pattern incident thereon, 
saidspecklepatteni being produced by said coherent radiation being inddent on said strongly 

scattering obj ect (5) , wherein fto size of tiie pixels of said photo-det«ctor (6) is detemuned by 
Ihe location thereof in said optical ^aratas relative to said strongly scattering object (5) and 
is set at substantiaUy tiie same size as timt of bright and dark patches present in said speckle 
pattern as determinedby Xfl^A, where X is the wavelength of said coherent radiation, andNA 
is the numerical aperture of said optical system (6, 7). 

2 Optical apparatus according to claim 1. wherein the optical system comprises 
a coherent radiation source (1) for providing a cohei^t radiation beam (2) of radius a, said 
photo-detector (6) being located a distance z from said stix>ngly scattering object (5), wherem 
NA=^/z. 

3 Optical apparatus according to claim 1, wherein tiie optical system comprises 
a coherent radiation source (1) for providing a coherent radiation beam (2) of radius a. and 
one or more converging optical elements (7) having a focal lengtii/, in the patii of the 
coherent radiation beam (2) between said strongly scattering object (5) and said photo- 
detector (6), wherein NA=fl^r. 

4. Optical apparattis according to claim 3 , wherein the one or more optical 
elements (7) are located a distance v from tiie strongly scattering object (5) and a distance b 
from tiie photo-detector (6), wherein 1/v + 1/fc = 1// 

5. Optical apparatus according to any one of claims 1 to 4. wherein a spatial tight 
modulator (4) is provided between flie coherent radiation source (1) and tiie strongly 
scattering object (5). 
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6. Optical apparatus according to aay one of claims 1 to 5, wherein one or more 

elements (3) with optical power is provided in the radiation patii between tiie coherent 
radiation source (1) and the strongly scattering object (5). 



5 7. Optical apparatus according to any one of daims 1 to 6, wherein tiie 

of a speckle pattern by said strongly scattering object is an unplementation of a physically 
nnclonahle fiinctiocu 

8. Optical apparatus according to any one of claims 1 to 7, wherein the photo- 
10 detector (6) and the strongly scattering object (5) are located relative to each other such that 

the pixels of the photo-detector (6) are at least smaUer tiian n\r.J)Ji^A, where timax is a 
number in the range 1 to 20. 

9. Optical apparatus according to claim 8, wherein T]^ is a nnmber in the range 
15 1 to 10. 

10. Optical ^aratus accordmg to claim 9. wherein Ti^ is a number in tiie range 
5 to 10. 

20 11. Optical apparatas^oc^mgtoctoal^^^ - 

12. Optical apparatus according to any one of clauns 1 to 1 1. wherein the photo- 
detector (6) and flie strongly scattering object (5) are located relative to each otiier such that 
the pixels of the photo-detector (6) are larger than ti„^VNA, where ti„^ is a b 

25 0and2. 

13. Gpdc^ ^parai3i£ ^iirding to ciarm 12, wherc-iii is a number 
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16. A me&od of detecting a speckle pattern, conqnising irradi&ting a strongly 

scattering object (5) with coherent radiation and providing a pixelated photo-detector (6) for 
receiving the resultant speckle pattern, wherein the size of the pixels of said photo-detector 
(6) is determined by the location thereof relative to said strongly scattering object (5) and is 
set at substantially the same size as that of bright and dark patches present in said speckle 
pattena as determinedby ?^A, where X is the wavelength of said coherent radiation, and NA 
is the numerical ^erture of said optical system. 
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An optical arrangement of at least a coherent light source (1), a strongly 
scattBiing object (5) (the PUF), and a pixelated photo-detector (6), wherein the pixels are 
coaapaiable m size with the bri^t and dark patches of the speckle pattern produced by 
cohermt radiation traversing the scattering object (5). Qoantitively, the pixel size should be 
5 roug^y X /NA, where K is the wavelength, and (i) NA=a/^ for free-space geometry, with a 
being the beam radius and z being the distance between the exit surfece of the PUF (5) and 
the pixelated detector (6), or (ii) NA is the niuxierical aperture of a lens (7) in an imaging 
geometry. In a preferred embodiment of the invention, there are tentative requirements that 
the pixels should be at least smaller than "n^A. / NA and preferably larger than *n^A, /NA, 
10 where (in an exemplary embodiment) t| mm =5 and t] min = 0.05, say. It will be understood by 
a person skilled in the art that the present invention is concerned with the optical arrangement 
of the PUF (5) and the photo-detector (6), rather than the photo-detector (6) per se. 

Figure 1 
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